Privacy,
without guesswork.

1. Scope and roles

This notice covers information Turn Byte controls for its website, enquiries, client relationships, suppliers, billing and business records. Turn Byte LLC is the controller or business for those activities.

When Turn Byte handles personal data inside software or systems on a client’s behalf, the client normally acts as controller or business and Turn Byte acts as processor or service provider. That processing is governed by the client agreement and any data-processing addendum. Individuals should usually direct requests about data in a client’s system to that client; Turn Byte will assist as required.

2. Information collected

• Connection and security information: IP address, browser and device details, request time, requested page, error and security signals that may be processed in ordinary hosting and security logs.
• Bot-verification information: Cloudflare Turnstile processes browser and connection signals and returns a verification token.
• Enquiry information: name, organisation, contact details and message that you choose to provide. When you submit the form, your enquiry and the Turnstile verification token are sent to Turn Byte’s server, which emails the enquiry to Turn Byte and sends a confirmation to the address you provide through Zoho ZeptoMail.
• Advertising measurement information: where the advertising pixel is used, it may collect information such as the page visited, referring page, browser and device details, IP address, identifiers stored in your browser and events such as a submitted enquiry. The content of your enquiry is not sent to the advertising provider.
• Business records: client and supplier contacts, proposals, contracts, project communications, support records, invoices and payment status. Turn Byte does not need or store full payment-card details for ordinary invoicing.

3. Purposes and legal bases

Turn Byte uses personal information to operate and secure the website; respond to enquiries; prepare, perform and support contracts; administer projects and accounts; invoice and keep business records; establish or defend legal claims; comply with law; and improve services using direct feedback and operational information; and measure and improve the effectiveness of Turn Byte’s advertising.

For people in the EEA, UK or similar jurisdictions, the legal basis is one or more of: steps requested before entering a contract; performance of a contract; Turn Byte’s legitimate interests in operating, securing and improving a business and communicating with clients; compliance with legal obligations; or consent where law specifically requires it. You may withdraw consent without affecting earlier lawful processing.

4. Cookies and similar technology

Essential security technology may use short-lived browser storage or similar signals where necessary to deliver the site and prevent abuse.

Turn Byte may use an advertising pixel provided by OpenAI on this website. The pixel loads a script from OpenAI and may use cookies, browser storage or similar technology to recognise your browser, attribute visits and enquiries to advertising, and help Turn Byte measure and improve its advertising. OpenAI processes this information under its own privacy terms. Turn Byte does not use behavioural analytics tools.

You can limit this by blocking third-party scripts or cookies in your browser settings or by using a content blocker, or by contacting Turn Byte through the contact page. Where the law requires consent for this technology, Turn Byte will ask for it before the pixel is used.

5. Recipients and service providers

Information may be processed by providers used for website hosting and security, business email, accounting, project collaboration, cloud infrastructure and professional advice, only as needed for those services. The public website is hosted and protected by Cloudflare. Contact form emails are delivered by Zoho ZeptoMail. Where the advertising pixel is used, OpenAI receives advertising measurement information as described in section 4. Project platforms and subprocessors vary by client and should be identified in the relevant project documents where required.

Turn Byte may disclose information when reasonably necessary to comply with law, protect rights or security, investigate misuse, or complete a corporate transaction subject to appropriate safeguards. Turn Byte does not sell personal information. Where the advertising pixel is used, information may be shared with OpenAI for advertising measurement as described above.

6. International processing

Turn Byte LLC is based in the United States and works with providers and clients internationally. Information may therefore be processed outside the country where it was collected. Where law requires a transfer safeguard, Turn Byte will use an applicable mechanism, which may include an adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognised safeguard. Project-specific transfers should be recorded in the relevant data-processing documents.

7. Retention

Turn Byte keeps personal information only while reasonably needed for the purpose collected, legal obligations, security, accounting or claims. Enquiries that do not become a client relationship are normally deleted or anonymised within 24 months. Contract, invoice and transaction records may be retained for the period required by tax, accounting and limitation laws. Security logs are retained according to operational need and provider settings. Client-controlled data is returned or deleted according to the project agreement, subject to lawful retention and protected backups.

8. Security

Turn Byte uses technical and organisational safeguards appropriate to the nature of the information and service, including access controls, secure transport and limiting collection. No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed. If a legally reportable incident occurs, Turn Byte will provide notice as required by applicable law and contract.

9. Your privacy rights

Depending on your location and the applicable law, you may have rights to request access, correction, deletion, portability or restriction; object to certain processing; withdraw consent; appeal a refusal; or complain to a privacy regulator. Turn Byte does not discriminate against a person for exercising an applicable privacy right.

Turn Byte does not use website information for automated decisions producing legal or similarly significant effects. It does not sell personal information or use sensitive personal information to infer characteristics. Where the law treats advertising pixels as targeted advertising or sharing, you may opt out by contacting Turn Byte as described below. Some U.S. state rights apply only when statutory thresholds or other conditions are met.

Submit a request through the contact page. Turn Byte may need information sufficient to verify identity and authority. If the request concerns a client-controlled system, identify the relevant client so the request can be directed appropriately.

10. Children

This business website is not directed to children and Turn Byte does not knowingly collect personal information from children through it. A client project involving children’s data requires express written scope, appropriate instructions and safeguards before that data is provided.

11. Changes

This notice may be updated when services, providers or legal requirements change. Material changes will be identified by a revised effective date and, where required, additional notice.

12. Contact

Turn Byte LLC is responsible for this notice. Privacy questions and requests may be sent through the contact page. Formal correspondence may be sent to:

If you are in the EEA or UK, you may also complain to the data-protection authority where you live or work.

Turn Byte LLC · Last updated 18 October 2026